Manuals / TRENDnet / Computer Equipment / Network Router

TRENDnet TW100-BRV324 manual Remote IP addresses, 172.16.9.10, Broadband VPN Gateway User Guide

Models: TW100-BRV324

1 136

Download 136 pages 15.48 Kb

Page 102

Image 102

Broadband VPN Gateway User Guide

Remote

IP addresses

172.16.9.10

For a single client, this is the same as the Gateway address

Subnet address: 11.5.0.0 255.255.0.0

Address range used on the remote LAN.

Page 102

Image 102

TRENDnet TW100-BRV324 manual Remote IP addresses, 172.16.9.10, For a single client, this is the same as the Gateway address

Contents

Page Page Table of Contents P/N 956YH10001 Copyright 2007. All Rights Reserved Document Version1.0Introduction Broadband VPN Gateway FeaturesInternet Access Features ChapterLAN Features Configuration & ManagementIPSec VPN Gateway Features Package ContentsSecurity Features Microsoft VPN Gateway SupportPhysical Details Front-mounted LEDsRear Panel Requirements InstallationProcedure Chapter5. Check the LEDs The Power LED should be ONInstallation The WAN1 or WAN2 LED should be ONThis Chapter provides Setup details of the Broadband VPN Gateway SetupOverview ChapterConfiguration Program PreparationFigure 5 Password Dialog If you cant connectHome Screen Navigation & Data InputStatic IP Settings WAN Port ConfigurationWAN Port Settings Data - WAN Port ScreenPPPoE Dial-up ButtonsPort Options Port Options ScreenData - Port Options Screen Also called Network Adapter Address or Physical Address. This is aPPPoE Connection Bind ServiceMTU Size Automatic Dial-upLAN Port Screen Data - LAN Port ScreenButtons Using another DHCP Server DHCPUsing the Broadband VPN Gateway s DHCP Server To Configure your PCs to use DHCPAdministration Load/Backup ScreenData - Load/Backup Screen Equilibrium Type has 2 optionsSetup Windows Clients PC ConfigurationTCP/IP Settings - Overview ChapterChecking TCP/IP Settings - Windows 9x/ME Using DHCPUsing Specify an IP Address Figure 13 Gateway Tab Win 95/98 Figure 14 DNS Tab Win 95/98Broadband VPN Gateway User Guide Checking TCP/IP Settings - Windows NT4.0 Figure 15 Windows NT4.0 - TCP/IPFigure 16 Windows NT4.0 - IP Address Obtain an IP address from a DHCP Server Specify an IP AddressFigure 17 - Windows NT4.0 - Add Gateway PC Configuration Figure 18 Windows NT4.0 - DNS1. Select Control Panel - Network and Dial-up Connection Checking TCP/IP Settings - WindowsFigure 19 Network Configuration Win Figure 20 TCP/IP Properties WinUsing DHCP Using a fixed IP Address Use the following IP AddressPC Configuration Checking TCP/IP Settings - Windows XP Figure 21 Network Configuration Windows XP1. Select Control Panel - Network Connection Using DHCP Using a fixed IP Address Use the following IP AddressFigure 22 TCP/IP Properties Windows XP Checking TCP/IP Settings - Windows Vista PC Configuration 1. Select Start Menu - Settings - Control Panel - Internet Options Internet AccessAccessing AOL 2. Select Set up or change your Internet ConnectionOther Unix Systems Macintosh ClientsLinux Clients Fixed IP AddressStatus Screen Operation and StatusOperation ChapterFigure 23 General Status Screen Operation and StatusKernel WAN1/2Firewall SystemPort Status Port StatusData - Port Status Screen ButtonsEvent Log Event LogData - Event Log Screen ButtonsInternet URL LogData - URL Log ButtonsSystem Log Data - System Log ScreenSystem Log Chapter Internet FeaturesThe following advanced features are provided Address List PC Database OverviewAddress List Data - Address List ScreenAddress List PC Database PC Database ScreenData - PC Database Screen dress, IP Address and CertifyButtons URL Filter Data - URL Filter ScreenFilter Strings To add an entry to the list, enter it here, and click the Add button ButtonsDynamic DNS Dynamic DNS ScreenData - Dynamic DNS Screen WAN1/2Web Site Button Static Routing Screen Static RoutingOverview Open Routing and Remote AccessData - Static Routing Screen Static RoutingOther Routers on the Local LAN Configuring Other Routers on your LANLocal Router ButtonsFor Router Bs Default Route Static Routing - ExampleFor Router As Default Route For the Broadband VPN Gateway s Routing Table0.0.0.0 Internet FeaturesNetwork Mask Gateway IP AddressData - QoS Screen Broadband VPN Gateway User GuideBased on QoS rules set below Rules Screen Security ConfigurationRules ChapterData - Rules Screen Outbound/Inbound ConnectionDefine Firewall Rule Inbound/Outbound Data - Define Firewall Rule ScreenDest IP ServicesLog Setting Advanced RuleSchedules Schedules ScreenFirewall -- Log Data - Log ScreenTime Zone Second Server System LogAvailable Services ServicesData - Services Screen Add New Serviceif not required Broadband VPN Gateway User GuideFirewall SecurityData - Security Screen MAX 3D Engine OptionsMaximum Con Figure 41 Multi-DMZ E-Mail Alert E-MailData - E-Mail Screen E-Mail LogSelect the desired option for sending the log by E-mail Policies VPN IPSecIPSec Chapteraddress VPN ConfigurationVPN Endpoint Traffic SelectorCommon VPN Situations VPN Pass-throughClient PC to VPN Gateway Connecting 2 LANs via VPN Figure 45 Connecting 2 VPN GatewaysVPN List VPN ConfigurationPolicies Screen OperationsCopy Enable/DisableMove DeleteAdding a New Policy Broadband VPN Gateway User GuideFigure 47 VPN Wizard - Start Screen Microsoft VPNAllow NetBIOS General SettingsEnable Policy Authentication and EncryptionAH Authentication Authentication AlgorithmESP Authentication ESP EncryptionThis is required if either ESP Encryption or ESP Authentica tion is enabledESP SPI IKE Internet Key ExchangeExchange Mode AuthenticationEncryption IKE SA AggressiveSetting Example 1 Connecting 2 Broadband VPN GatewaysVPN Examples LAN A GateIPSec SA Parameters Setting Example 2 Windows 2000/XP Client to LANBroadband VPN Gateway Configuration ValueDeselect Activate the default response rule. Click Next Windows Client ConfigurationFigure 50 Windows 2000/XP - Local Security Settings IPSec SA ParametersFigure 51 Windows 2000/XP - Policy Properties Figure 52 IP Filter ListFigure 53 Filter Properties Addressing 8. Enter the Source IP address and the Destination IP addressFigure 54 New Rule Properties IP Filter List 12. Select Negotiate security this selects IKE, then click Add Figure 55 New Rule Properties Filter ActionFigure 56 Require Security Properties Broadband VPN Gateway User GuideFigure 57 Modify Security Method VPN SettingWindows Setting Figure 58 Require Security PropertiesFigure 59 Tunnel Setting Figure 60 Authentication MethodFigure 61 Windows 2000/XP Client to Broadband VPN Gateway Figure 62 Windows 2000/XP Client to Broadband VPN GatewayFigure 64 Filter List Figure 63 Filter Properties Addressing22. Click OK to save your changes, then Close Broadband VPN Gateway User GuideFigure 65 Filter Action Figure 66 Security MethodsMicrosoft VPN Figure 68 Tunnel Setting Figure 67 Modify Security MethodFigure 69 Authentication Method Figure 70 DUT to Win2K Properties32. Click the Advanced button to see the screen below Figure 72 Key Exchange SettingsFigure 71 Properties - General Tab 33. Click the Methods button to see the screen belowFigure 74 IKE Security Algorithms Example 3 Windows 2000 Server to VPN GatewaySetting Figure 75 Windows 2000/XP Client to Broadband VPN GatewayFor a single client, this is the same as the Gateway address Remote IP addresses172.16.9.10 Subnet address 11.5.0.0 Address range used on the remote LANWindows 2000 Server Configuration Figure 77 Windows 2000 Server - AddressingRequesting a Trusted Certificate CertificatesTrusted Certificates Trusted CertificatesPrivate Certificate Private CertificateData - Private Certificate Screen Private Certificate RequestsNew Request Requesting a Private CertificateUpload Button ButtonSelect the desired option. RSA is recommended To add a New CRL VPN Status VPN StatusData - VPN Status Screen ButtonsChapter Server SetupMicrosoft VPN OverviewUser PPTP ServiceData - VPN Adapter Screen Properties Data - User ScreenExisting Users ButtonData - Status Log Screen Status Log ScreenService Log Status Log1. Click Start - Settings - Dial-up Networking Windows Client SetupWindows 98/ME 2. Select Make New Connection2. Select Start - Settings - Dial-up Networking To establish a connectionWindows ME VPN Dialing Properties Windows Figure 92 Windows 2000 Network ConnectionFigure 93 Windows 2000 Public Network Figure 94 Windows 2000 VPN Host Figure 95 Windows 2000 Connection AvailabilityFigure 96 Windows 2000 Finish Wizard Windows XP Figure 97 Windows XP Network Connection TypeFigure 98 Windows XP Network Connection Figure 99 Windows XP Connection Name Figure 100 Windows XP Public NetworkFigure 101 Windows XP VPN Server Changing the connection settings To establish a connectionFigure 102 Windows XP Connection Availability Other Features & Settings ChapterOverview Ping DiagnosticsData - Diagnostics Screen DNS LookupSearch Button Broadband VPN Gateway User GuidePassword Screen PasswordData - Account Management Screen Web Management SettingsData - Web Management Screen To connect from a remote PC via the Internet HTTPS//123.123.123.1238080To perform the Firmware Upgrade Firmware UpgradeData - Firmware Upgrade Screen Firmware UpgradeBackup/Restore Data - Backup/Restore ScreenDefault Configu- ration This will delete ALL of the existing settingsBroadband VPN Gateway User Guide Internet Access TroubleshootingGeneral Problems Appendix AIt is a security risk, since the firewall is disabled FCC Statement Appendix B SpecificationsBroadband VPN Gateway FCC Radiation Exposure StatementCE Marking Warning CE StandardsAppendix B - Specifications Broadband VPN Gateway User Guide